Security Bulletin: WebSphere MQ is vulnerable to disclosing side channel information via discrepencies between valid and invalid PKCS#1 padding. ROBOT. (CVE-2018-1388)

Summary WebSphere MQ is affected by the ROBOT vulnerability where it may disclose side channel information via discrepencies between valid and invalid PKCS1 padding. Vulnerability Details CVEID: CVE-2018-1388 DESCRIPTION: IBM MQ is vulnerable to TLS implementations may disclose side channel...

CVE-2018-1388

GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS1 padding. IBM X-Force ID: 138212...

Information disclosure

GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS1 padding. IBM X-Force ID: 138212...

CVE-2018-1388

GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS1 padding. IBM X-Force ID: 138212...

CVE-2018-1388

CVE-2018-1388 is a GSKit V7 vulnerability that can disclose side-channel information through discrepancies in PKCS#1 padding. It has been addressed in multiple IBM advisories across products using GSKit, including IBM i, WebSphere-related offerings, IBM Tivoli Directory Server, IBM Security Direc...

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

Some TLS implementations handle errors processing RSA key exchanges and encryption PKCS 1 v1.5 messages in a broken way that leads an adaptive chosen-chiphertext attack. Attackers cannot recover a server's private key, but they can decrypt and sign messages with it. A strong oracle occurs when th...

strongswan - Insufficient input validation in RSASSA-PSS signature parser

Strongswan Release Notes reports: Fixed a DoS vulnerability in the parser for PKCS1 RSASSA-PSS signatures that was caused by insufficient input validation. One of the configurable parameters in algorithm identifier structures for RSASSA-PSS signatures is the mask generation function MGF. Only MGF...

Code injection

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

TLS implementations may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding

Overview TLS implementations may disclose side channel information via discrepancies between valid and invalid PKCS1 padding, and may therefore be vulnerable to Bleichenbacher-style attacks. This attack is known as a "ROBOT attack". Description CWE-203: Information Exposure Through Discrepancy...

CVE-2014-9934

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

Design/Logic Flaw

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

CVE-2014-9934

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

CVE-2014-9934

CVE-2014-9934 : A PKCS#1 v1.5 signature verification routine in all Android CAF releases using the Linux kernel may not check padding, potentially enabling signature forgery or bypass of integrity checks. The NVD entry reports a high impact (CVSS v3.0: HIGH, LOCAL attack vector with high confiden...

CVE-2014-9934

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

[SECURITY] [DLA 612-1] libtomcrypt security update

Package : libtomcrypt Version : 1.17-3.2+deb7u1 CVE ID : CVE-2016-6129 It was discovered that the implementation of RSA signature verification in libtomcrypt is vulnerable to the Bleichenbacher signature attack. If an RSA key with exponent 3 is used it may be possible to forge a PKCS1 v1.5...

DLA-612-1 libtomcrypt - security update

Bulletin has no description...

Fedora 22 : botan (2016-fe0d8f126a)

From the upstream release notes : Botan 1.10.13 has been released backporting some side channel protections for ECDSA signatures CVE-2016-2849 and PKCS 1 RSA decryption CVE-2015-7827. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

FreeBSD : botan -- multiple vulnerabilities (ac0900df-31d0-11e6-8e82-002590263bf5)

Jack Lloyd reports : Botan 1.10.13 has been released backporting some side channel protections for ECDSA signatures CVE-2016-2849 and PKCS 1 RSA decryption CVE-2015-7827. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Updated botan packages fix security vulnerabilities

Updated botan packages fix security vulnerabilities: During RSA decryption, how long decoding of PKCS 1 v1.5 padding took was input dependent. If these differences could be measured by an attacker, it could be used to mount a Bleichenbacher million-message attack CVE-2015-7827. ECDSA and DSA...